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[57] ABSTRACT 

A card combination which is issued to a single card- 
holder can be reprogrammed by the cardholder for use 
by a sub-user to a desired extent with regard to value 
and time. The cardholder uses a master enabling code to 
access the programming mechanism. He/she assigns a 
sub-PIN for use by the sub-user and opens a subordinate . 
account for the allowed credit value within card's total 
credit value. This subordinate account can be accessed 
using the sub-PIN. A limited term can be selected dur- 
ing which any transaction using the sub-PIN and using 
the subordinate account can be conducted. After the 
expiration of that term the sub-PIN is automatically 
erased and any balance in the suborinate account is 
re-credited to die main credit account of the card. Such 
a multi-user card can also be used in conjunction with a 
program for varying the value of units stored in the 
credit account 

25 Claims, 16 Drawing Sheets 




06/04/2004, EAST Version: 1.4.1 



US. Patent Jun. 6, im 



Sheet ! of 16 4,837,422 



106^ I05\ 104 



107 




Z 



103 slOI 



PIS PL A Y 



l^-cn RD 



Info 


Serv. 


7' 


8 


9 


M 




4 


5 


6 


\vv 


1 


2 


3 


OK 


Reset 


0 


0 


C 



108 



109 



102 



110 



FIG. I 




A FIG.3 



FIG. 4a 




502 



06/04/2004, EAST Version: 1.4.1 



U.S. Patent Jim. 6, i%9 



Sheet 2 of 16 4,837,422 



2/5 



217 



2/6 f 2/4 



219 



218 



I/O 
170~ 



220 



208, 



V 



213 2IL 

&4 



MAIN | 
PROGRAM 
MEMORY 



STANDARD 
CARD 
LOGIC 



INTERIM 
MEMORY 



2^2 

P 

I 

N 



206 204 230 
207 | 205 | 203 



Tf 



SUBUSER& 

I 



PROGRAM 



209 



DISPLAY sr 



Power 



229 

Z 



103 



104 



Info 


















Serv. 











102 



\ 

m 



224 



225 



WORKING 
MEMORY 



221 



227 s 228 



'MEMORY 



M/VV 
CARD 
LOGIC 



107 



■VV 



OK 



202 



201 



M > 



■102 
±106 



Reset 



709 



M 
E 
N 
M 



T A 
B L 



221 



223 



222 



'J 



101 



FIG.2 



06/04/2004, EAST Version: 1.4.1 



U.S. Patent Jun. 6, im 



Sheet 3 of 16 4,837,422 



1, 



403 



t 



103 s40l 



DISPLAY 



|*1-CflRD 

Envelope 



Info 


Serv- 
ice 


7 


8 


9 


\M\ 




4 


5 


6 


\w\ 


1 


2 


3 


OK 


Reset 


m ■ 


0 


C 



J 402 

r 

^ ir. 



102 



FIG.4 



303 




M-CHRD 



401 



DISPLAY 



Envelope 

i : 



Info 


Sent 
ICS- 


7 


8 


9 


\M\ 




4 


5 


6 


\w\ 




1 


2 


3 


OK 


Reset 


0 ■ 


0 


C 













,301 



FIG.5 



06/04/2004, EAST Version: 1.4.1 



U.S. Patent Jun. 6, im 



Sheet 4 of 16 4,837,422 



304^ 403 



DISPLAY 



L 



301 



RD 



Envelope 



Info 


Serv- 
ice 


7 


a 


9 


\M\ 




4 


5 


6 


\vv\ 


1 


2 


3 


OK 


Reset 


# ■ 


0 


C 




FIG. 6 



304. 403 302 



M-CHRI 

ENVELO PE 



y77771 Yff'l 




{7 


8 


9 








> 












S 


6 








/ 


2 


3 


OK 


Reset 


• 


0 


C 



L 



301 




FIG. 7 



06/04/2004, EAST version: 1.4.1 



U.S. Patent Jun.6,i989 



Sheet 5 of 16 4,837,422 




06/04/2004, EAST version: 1.4.1 



U.S. Patent Jim. 6, im 



Sheet 6 of 16 



MULTI-USER PROGRAMMING FOR SUB-USER ( "M" KEY) 



4,837,422 
FI G. 9 



RESPONSE 
OR PISPAAY 



CARDHOLDER'S 
OPERATION 



FUNCTION OF CARD 
PRPCBSSH"? UU1Z 



ENTERS "M*n 



ENTER PIN 



ENTERS PIN 



-YES- 



PIN CORRECT ? 

I 

NO 

( t 

I STARTS WRONG 
Ipin PROCEDURE 



ENTER 
USER 


SUB- 
CM-) PIN 








t 


M-PIN 


EXISTING 



ENTERS SUB- 
USER (M-) PIN 



YES- 



ENTERS OTHER M-PIn] » 



-NO- 



CHECKS WHETHER 
M-PIN ALREADY 
EXISTING 



M-PIN OK ? 



ENTERS "OK" 



WHICH SERVICE ? 



ENTERS CODE 
OF SERVICE 



X 



OPENS SUB-USER (M-)PIN 
MEMORY; WRITES M-PIN 
INTO MEMORY; LOCKS M- 
PIN MEMORY; ASSIGNS 
SUB-USER ' S TRANSACTION 
MEMORY TO M-PIN 



CODE OK ? 



ENTERS "OK 1 



j ACTIVATES SELECTED 
SERVICE FOR M-PIN 



AMOUNT OR 
VALUE ? 



ENTERS AMOUNT 
OR VALUE 



-NO- 



ONLY XYZ AMOUNT/ 
VALUE AVAILABLE. 
ENTER OTHER 
AMOUNT/VALUE 



ENTERS OTHER 
AMOUNT/VALUE 



-YES- 



CHECKS WHETHER 
SUFFICIENT FUNDS 
AVAILABLE IN CARD- 
HOLDER'S TRANSACTION 
(CREDIT) MEMORY 



AMOUNT OK?} - 



ENTERS "olFj - 



TERM ? 


» 


ENTERS TERM 




. i • 1 


TERM OK ? 1 * 


ENTERS 11 OK " [■ 



TRANSFERS AMOUNT OR 
VALUE FROM CARDHOLDER'S 
TRANSACTION MEMORY TO 
SUB-USER'S TRANSACTION 
MEMORY 



ASSIGNS TERM TO 
AMOUNT IN SUB-USER'S 
TRANSACTION MEMORY 

END 1 



06/04/2004, EAST Version: 1.4.1 



U.S. Patent Jun.6,1989 Sheet 7 of 16 4,837,422 



CANCELLATION OF SUB-USER AUTHORIZATION 



FIG. 10 



RESPONSE 
OK DISPLAY 



CARDHOLDER'S 
OPERATION 



ENTERS H RESET"| 



M OR W ? ^ 



Renters "m" | 



ENTER PIN I — +- [ENTERS PIN \ 



ENTER M-PIN \ 



L 



NOT EXISTING} 



ENTER RESET | - 



-YES - 



ENTERS M-PIN 



-NO- 



ENTERS CORRECT 
M-PIN 



YES 



ENTERS "RESET" | - 



FUNCTION OF CARD 
PROCESSING UMUL 



PIN CORRECT ? 



s. 



STARTS WRONG PIN 
PROCEDURE 



CHECKS WHETHER 
SUB-USER (M-) PIN 
EXISTING 



DEACTIVATES SERVICE; 
RE-TRANSFERS POSSIBLE 
CREDIT BALANCE FROM 
SUB-USER 1 S TRANSACTION 
MEMORY TO CARDHOLDER * S 
TRANSACTING (CREDIT) 
MEMORY; TRANSFERS 
SUB-USER 1 S TRANSACTION 
AMOUNTS TO CARDHOLDER 1 S 
TRANSACTION MEMORY, 
WHILE ASSIGNING THE M-PIN 
TO EACH SUCH SUB-USER 
TRANSACTION AMOUNT; 
CANCELS M-PIN IN M-PIN 
MEMORY 



I EN D 1 



06/04/2004, EAST version: 1.4.1 



U.S. Patent Jun.6,1989 Sheet 8 of 16 4,837,422 



VARIABLE VALUE PROGRAMMING ( M W" KEY) 
(EXAMPLE "FOREIGN EXCHANGE" ) WITH "INFO" 

CARD OPERATION 



FIG. II 



RESPONSE 
ON DISPLAY 



CARDHOLDER • S 
OPERATION 



ENTERS "INFO" | 



ENTER PIN 



- {ENTERS PIN"~| - 



■ YES 



AMOUNT OF 
AVAILABLE 
BALANCE 



HENTERS "W"l 



CURRENCY ?) - 



ENTERS "VV"J - 



FFR ? h 



{ENTERS "W" 



YEN ? \ - 



ENTERS "VV")- 



P STERLING ?f - 



ENTERS "VV"| - 



DMK . ? j - 



ENTERS "OK"] 



| DMK AMOUNT ? [ - » — | ENTERS AMOUNT) - 



■NO« 



NOT SUFFICIENT 
FUNDS - ENTER 
OTHER AMOUNT 



FUNCTION OF CARD 
PROCESSING UNIT 



PIN CORRECT ? 
I 

NO 

, i 

(STARTS WRONG 
PIN PROCEDURE 



PROVIDES SELECTION OF 
PRE-PROGRAMMED FOREIGN 
CURRENCIES TO DISPLAY 



ENTERS OTHER AMOUNT^ 



CHECKS WHETHER 
AMOUNT IS AVAILABLE 



YES 



GO TO 

VALIDATION 

TERMINAL 



GOES TO 

VALIDATION 

TERMINAL 




(CONTINUED IN FIG. 13) 



06/04/2004, EAST version: 1.4.1 



US. Patent Jun.6,1989 Sheet 9 of 16 4,837,422 



VARIABLE VALUE PROGRAMMING ("W" KEY) 
(EXAMPLE "FOREIGN EXCHANGE" ) WITHOUT "INFO" 

CARD OPERATION 



FIG. 12 



RESPONSE 
QU PI SPLAY 



ENTER PIN] 



■YES 



CURRENCY ? 



1FFR ? h 



YEN ? | " 



[P STERLING ?h 
IDMK ? | 



|DMK AMOUNT ?h 



■NO- 



NOT SUFFICIENT 
FUNDS . ENTER 
OTHER AMOUNT 



CARDHOLDER ' S 
OPERATION 

[ENTERS "W" 1 



| ENTERS PINh 



{ENTERS "W'h 



{enter?j|w|[}- 



■ {enters "w M h 



{ENTERS "W"f - 



J ENTERS "OK" | 



ENTERS AMOUNT 



FUNCTION OF CARD 
PROCESSING UNIT 



PIN CORRECT ? 
I 

NO 

: t 



STARTS WRONG 
PIN PROCEDURE 



PROVIDES SELECTION OF 
PRE-PROGRAMMED FOREIGN 
CURRENCIES TO DISPLAY 



ENTERS OTHER AMOUNT^ 



-YES- 



CHECKS WHETHER 
AMOUNT IS AVAILABLE 



GO TO 

VALIDATION 

TERMINAL 



GOES TO 

VALIDATION 

TERMINAL 




(CONTINUED IN FIG. 13) 



06/04/2004, EAST Version: 1.4.1 



U.S. Patent Jun. 6, 1989 



Sheet 10 of 16 4,837,422 



VARIABLE VALUE PROGRAMMING ("W" KEY) 
(EXAMPLE "FOREIGN EXCHANGE") 

VART ABLE TERMINAL OPERATION 



FIG. 13 



RESPONSE 
Q1L DISPLAY 



CARDHOLDER ' S 
OPERATION 



FUNCTION OF VALIDATION 
TERMINAL OPERATION 



(CONTINUED FROM FIGS . 11 & 12) 







INSERTS CARD INTO 
VALIDATION TERMINAL 










ENTER PIN| • 1 ENTERS PIN}— — > 



YES 



RATE OF EXCHANGE: 



YOUR DEBIT: 



(ORIGINAL CURRENCY ) 



YOUR CREDIT: 



(FQREICN EXCHANGE) 

OK ? 



NO 

U> |ENTERS "RESET" 



YES 



ENTERS "OK" \~ 



£ 



TAKE CARD QUT| - 
CARD OUT | 



TAKES CARD OUT 



PIN CORRECT ? 

! 

NO 
± 



STARTS WRONG 
PIN PROCEDURE 



READS CURRENCY AND 
AMOUNT FROM CARD; 
ACTIVATES CORRESPOND- 
ING RATE OF EXCHANGE; 
CALCULATES AMOUNT OF 
FOREIGN EXCHANGE 




RESETS CARD 



DEDUCTS RELEVANT AMOUNT 
OF ORIGINAL CURRENCY 
FROM CARD'S TRANSACTION 
(CREDIT) ACCOUNT; WRITES 
FOREIGN CURRENCY AMOUNT 
INTO CARD'S VARIABLE 
VALUE (FOREIGN EXCHANGE) 
MEMORY; STORES RATE OF 
EXCHANGE FOR LATER 
RE-CALCULATION OF NOT 
USED UP FOREIGN EXCHANGE 
BALANCE; VALIDATES CARD'S 
VARIABLE VALUE MEMORY 



| END | 



06/04/2004, EAST Version: 1.4.1 



US- Patent Jun. 6, 1989 



Sheet 11 of 16 4,837,422 



VARIABLE VALUE RE -CHANGE ( M W" KEY) 
(EXAMPLE "FOREIGN EXCHANGE" ) 

CARP OPERATION 



RESPONSE 
QJL DISPLAY 



CARDHOLDER'S 
OPERATION 

|ENTERS "RESET" 



|M OR W ? 



Renters w w» 



| ENTER PIN h 



HENTERS pin f - 



■YES ■ 



I DMK ?h 



RE -CALCULATED 
AMOUNT 



ENTER RESET 



ENTER 
CURRENCY 




ENTERS "DMK" 
BY REPEATEDLY 
PRESSING "W" 







HENTERS "OK^H- 



jENTERS "RESET" H 



FIG 14 



FUNCTION OF CARD 
PROCESSINO UNIT 



HP IN CORRECT ? 
I 

1 NO 

i t 

I STARTS WRONG 
PIN PROCEDURE 



RE-CALCULATES 
DMK BALANCE BY 
FORMER RATE OF 
EXCHANGE TO 
ORIGINAL CURRENCY 



RE-TRANSFERS RE- 
CALCULATED AMOUNT 
TO ORIGINAL 
CURRENCY TRANSACTION 
MEMORY 



END 



06/04/2004, EAST version: 1.4.1 



U.S. Patent Jun.6,1989 Sheet 12 of 16 4,837,422 




FIG .15 




FIG. 16 



06/04/2004, EAST Version: 1.4.1 



U.S. Patent Jun.6,1989 Sheet 13 of 16 4,837, 



1702 /-I602 
1503 A C 




F/G./7 



06/04/2004, EAST version: 1.4.1 



US. Patent Jim. 6, lm 



Sheet 14 of 16 4,837,422 



VTVO CARD TSS1ITNO MACHTNE (1PKRATT0N 

OPERATOR 



RESPONSE ON 
OPERATOR 1 S 
DISPLAY 



lENTERS "START"| 



VISITOR'S NAME 




ENTERS NAME 


PASSPORT NO. ? 




+PASSPORT NO, 



1NAME+ NO * OK ? 



lENTERS "OK 77 "!- 



NO- 



ICURRENCY AND AMOUNT ? 



VIVO 


6, 


000 


./. CARD 






DEPOSIT 


MM 


-42. 


VIVO 


7, 


960 


OK ? 







ENTERS 
D MK 4,000 



DMK 4,000 
RECEIVED ? 



Enters "ok"! 



Henters w ok m | 



SUB-USER'S 
CREDIT AMOUNT ? 



Centers h zero"H 



OR—* ^ENTERS:VIVO 500h 



RESPONSE ON 

visitor's DISPLAY VISITOR 



lYOUR PIN, PLEASE)— HENTERS PIN| 



|PIN OK ? h 



-[ENTERS "OK"H 



FIG. 18 

MACHINE FUNCTION 



CHECKS WHETHER 
ON HOT LIST | 

YES 



STARTS SPECIAL 
PROCEDURE 



CALCULATES AMOUNT 
WITH VIVO RATE 
OF EXCHANGE 



CREDITS VIVO 7,960 
IN CARDHOLDER'S 
TRANSACTION MEMORY 
(MARKS VIVO AMOUNT 
"DMK" FOR ORIGINAL 
CURRENCY I DENTIFI CATI ON ) 



TRANSFERS SUB-USER'S 
CREDIT AMOUNT VIVO 500 
FROM CARDHOLDER'S 
TRANSACTION MEMORY TO 
SUB-USER'S TRANSACTION 
MEMORY 



— 



SUB-USER'S (M-) 
PIN, PLEASE 



ENTERS SUB- 
USER' S(M-)PIN 



INSCRIBES PIN IN CARD; 
ENTERS DATA IN GENERAL 
VISITOR FILE; ENTERS 
AMOUNTS IN MACHINE ' S 
AUDIT FILE 



SUB-USER 1 S 
PIN OK ? 



Enters "6k"} - 



TAKE CARD 
AND SLIP OUT 



TAKES CARD 
AND SLIP OUT 



| CARD AND SLIP OUT] 



INSCRIBES SUB-USER'S 
(M-) PIN IN CARD AND 
ASSIGNS SUB-USER'S 
(M-) PIN TO SUB-USER'S 
TRANSACTION MEMORY; 
PRINTS VISITOR'S SLIP 

J . 

END I 



06/04/2004, EAST Version: 1.4.1 



US. Patent Jun. 6, im sheet 15 of 16 4,837,422 




06/04/2004, EAST Version: 1.4.1 



U.S. Patent Jun. 6, im 



Sheet 16 of 16 4,837,422 



VIVO fTARO RETURN MACHINE 



FIG. 21 



RESPONSE ON VIS- 
ISTQR'S 



VISITOR'S 
OPERATION 

[ENTERS "START"! 



[INSERT CARD h 



IENTER PIN | 



^INSERTS CARPI 



■^ntersTTnJ- 



YES 



YES 



YOUR VIVO CREDIT 
BALANCE 734 
+CARD DEPOSIT 
TOTAL CREDIT 774 



ENTER: 
RETURN MONEY & 
MONEY RECEIVED 



ENTERS "RETURN 
MONEY & MONEY 
RECEIVED" 



TAKE MONEY 
& SLIP OUT 



TAKES MONEY 
& SLIP OUT 



[MONEY & SLIP OUT | 



MACHINE 
FUNCTION 



PIN CORRECT ? 

.— ±- 

STARTS WRONG 
PIN PROCEDURE 




CHECKS WHETHER 
CARD IN PROPER 
CONDITION ? 

I 

SL 

WITHHOLDS 
CARD DEPOSIT 

CREDITS 
CARD DEPOSIT 

CALCULATES UNUSED 
CREDIT BALANCE OF 
CARD'S TRANSACTION 
MEMORIES WITH DMK 
RATE OF EXCHANGE; 
RESETS CARD'S TRANS- 
ACTION MEMORIES TO 
ZERO; CLEARS PIN 
MEMORIES 



DISPENSES DMK 387; 
UPDATES GENERAL 
VISITOR'S FILE; 
ENTERS AMOUNT IN 
MACHINE'S AUDIT 
FILE; PRINTS VIS- 
ITOR'S SLIP 

t ■ 

END | 



06/04/2004, EAST version: 1.4.1 



4,837,422 

1 2 

contents of the memory being available only within the 
MULTI-USER CARD SYSTEM card. 

This patent further discloses components included in 
FIELD AND BACKGROUND OF THE the card and activated in response to inputs from a 

INVENTION 5 rea der, to effect checking of the identity and entitle- 

The present invention relates, in general, to elec- ment of a user of the card. Thus, the comparing of the 
tronic transaction and identification systems, and, in PIN stored in the card and the PIN inputted at the time 
particular, to portable electronic transaction devices, of using the card is no longer executed in the reader. No 
such as cards, keys, etc. and appertaining stationary algorithm can be derived or stolen from the reader, nor 
equipment, such as terminals and coding and transac- 10 does it make sense to obtain a reader for deriving PINs 
tion devices. from stolen cards or illegally encrypting PINs for faked 

For the sake of simplicity, the portable devices will cards, 
be referred to as "cards" "M-cards" or "modules". Bu j stil i the pin is to be inputted into the card for 
M-cards, for the purpose of this application, are plastic checking via the reader by keying the PIN onto the PIN 
devices, comprising integrated circuits commonly ' k d of ^ readen It is possible to illicitly tap the line 
called "smart cards" or "chip cards". Such smart cards ^ pjN ^ m £ fi feader tQ ^ of 
or chip cards contain electronic components in micro- ^ . rf m { { fa . ^ 

structure, i.e. integrated circuits. Devices of this nature tn ; ; ™ wuul " P c ™" a wuuumu iu ictuu 
have been disclosed in German patent DE No. 19 45 ^ PIN f. fron > ^f ^c cards 

777 C3 to DETHLOFF, filed on Sept 10, 1969. » To eliminate this kind of a risk, U.S. Pat. No. 

The integrated (semiconductor) circuits contained in 3,641,3 16, to DETHLOFF et al, discloses means mcor- 
such cards are generally of two types: logic structures porated in a card to input the PIN directly into the card, 
and memories. This, in addition, eliminates the possibility of a third 

Before the advent of these cards, all machine-opera- person unauthorizedly spying out the PIN, when same 
ble or machine readable cards carried only passive 25 is keyed in onto the keypad of the reader by the rightful 
memory means. Information could be written on or cardholder. 

read from a magnetic stripe, for instance. A piece of Upon checking (comparing the PINs), the checking 
information could also be erased from the stripe and means within the card produces a signal, which indi- 
another, e.g. updated, piece of information, could be cates whether the inputted PIN corresponds to the 
written onto it again. The capacity of magnetic media 30 stored PIN or not. 

on cards is limited to a few hundred bits of information. It wiU be under stood that cards can be faked to pro- 
The advantage of a card containing chips is twofold: duce ^ ye d ^ u fa therefore ^ a 

the logical structures make the card active, i e. informa- ^ card authentication chec k is made. Only an 

tion can be processed within the card and could oe « , , . , . 

computed or 'compared with other information and the 35 a *henUc, genuine card can produce a true identity 
like. The other advantage is provided by the semicon- check signal. «_ * • •« ^ ^ ^ 

ductor memories, which have a multifold capacity com- Such checks for authentication will very probably be 
pared with magnetic media on cards, and which can be based on so-called public key or trapdoor algorithms, 
programmed in various ways (to make their contents as disclosed in U.S. Pat. No. 4,405,829 to RIVEST et al. 
inaccessible after write-in, to make it unalterable etc). It 40 This kind of verification requires a secret key to be 
can be foreseen, that within a reasonable period of time, "sealed" within the card, i.e., the key is to be charged 
chip cards will be more generally introduced and will into a memory within the card in a way that it cannot be 
replace the presently widely used magnetic stripe cards. read out from the card and cannot be altered after hav- 
Presently, common cards, magnetic stripe, and others, ing been charged and that it is only available within the 
are "single-user cards", i.e. such cards are assigned to 45 card for processing when executing an authentication 
only one cardholder. check. 

Current magnetic stripe cards, which are machine- a key in the form of a card with a magnetic stripe 
operable, carry as one piece of information on their that can be programmed by the issuer when issued for a 
magnetic stripe, a personal designation of the rightful selected period of time to unlock doors, for example, in 
cardholder. A so-called PIN (Personal Identification 50 a notel> ^ from u#s . Pat. No. 4,385,231 to 

Number) is widely used as such a personal designation. MIZUTANI et al. U.S. Pat No. 4,523,297 to UGON et 
It is encrypted and, when the card is used, it will be ^ discloses a porta ble hand held machine which in- 
decrypted in the reading device. To ensure the identity dudes ft keyboardf displaVi microprocessor and mem- 
of the user and the nghtful ^ownei •, tte PIN *^ from ^ which receives a carrier in the form of aplastic 

the mag stnpe and then decked The PIN is then 55 c J ^ h ^ carries a ^processor and memory 
^der"? Se ute^^ for P^ ose of carrying on a dialogue between the 

rC The r aLoritmTio decrypt the coded PIN obtained «"f^"» md J^^ e \^:. T US * P f' ^ 
from the card is available* all readers. It is obvious 4 ' 305 : 05 ? to BEOTON which discloses a system for 
that technically trained criminals could obtain the algo- 60 transferring funds u tog portable modules carrying 
rithm or the decrypting module or a whole reader, to keyboards and displays; U.S. Pat. No. 4 614,861 to 
illegally decrypt PINs from stolen cards or to learn how PAVLOV et al which discloses a unitary self contained 
to encrypt false PINs onto the memory of forfeited card having keyboard and display, U.S. Pat No. 
cards. 3,996,450 to KERKHOFF disclosing a cash dispenser 

To overcome this drawback, U.S. Pat. No. 4,105,156, 65 with a PIN changing function; and U.S. Pat. No. 
to DETHLOFF, discloses memory means that are inac- 4,460,965 to TREHN disclosing the loading of a sub 
cessibly and integrally incorporated in a card for entry transaction memory from a main credit memory in porr 
and storage of information therein, and further, the table devices. 
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DETHLOFF U.S. Pat No. 4,105,156 claims memo- those cards in a legally satisfying way and to cover the 

ries that are chargeable only once and the contents of relevant liabilities. 

same being only available within the card. All in all such preprogrammed cards for plural users 

As will be seen thereafter, the integrated circuits would be an inflexible instrument as day-to-day require- 
within a card, which include memories whose contents 5 ments of users cannot be foreseen, 
are only available within the card, components included The multi-user card (M-card) of the present invention 
in a card, which are responsive to an input from outside should not be mistaken for a multi-purpose or multi-ser- 
the card, and means incorporated in a card to input vice card, i.e., a card which is commissioned or backed 
information directly into a card, represent the state of by different "issuers", that is to say by different busi- 
ng art. 10 nesses, for example, by- one or more banks, a railway 

It is further within the state of the art that cards are company, a gasoline company and by a car parking 

issued and assigned to one and one only user or card- business. Cards of this nature have been disclosed, for 

holder. It is common practice for card issuing organiza- example, in U.S. Pat No. 4,443,027, by McNEELY et al 

tions to stricdy instruct card users not to give away or as a Multiple Company Credit Card System. Also, see 

permit other persons to use the card. The organizations 15 U.S. Pat. No. 4,656,342, to UGON. Such cards are still 

hold the cardholder liable for any seemingly authorized assigned to only one cardholder, 

use of the card by third persons. U.S. Pat. No. 4,277,837 to STUCKERT discloses a 

For example: the instructions of a known card issuing portable terminal for receiving two cards for conduct- 
organization, which will be called XY, read as follows:. ing transactions between the cards. PCT application no. 

20 WO83/03018 discloses the use in cards of a plurality of 

**keep your XY card in a safe place and permit no identifying characteristics which can be randomally 

other person to use it . . . do not tell any other selected. 

person your secret Personal Identification Number The limitation of one card to one cardholder is not 

(PIN) or write your number on your XY card or the only drawback of present card systems. Another 

otherwise make it available to anyone". 25 one is represented by the inflexibility of the values of 

stored units of money or other credits. 

The XY cardholder Agreement states: Cards contain in their memories, information which 

permits the cardholder to obtain certain values, i.e., a 
"We will mail you a secret PIN and you agree to keep piece of merchandise, a service such as car parking, or 
the number secret, even from bank employees". 30 a fare from location A to location B. Such credit infor- 
mation is usually expressed by "units". Those units may 
The limitation by the principle "one card — one user" represent different values, even in the same card. In a 
represents an uncomfortable inconvenience. If one multi-purpose or multi-company card system, one card 
thinks, for example, of a card used by travelers abroad. may contain different kinds of units for different kinds 
The cardholder is accompanied by his or her family; the 35 of businesses, such as a bank, a railway company, a 
cardholder is required, in each and every case, to exe- gasoline company or a parking lot. For example, the 
cute card transactions personally, i.e. he/she could not "units" in banking are designated as money units (1 
send somebody else of the family or shopping with unit— 1 U.S. $ or 1 yuean), the "units" of a railway 
his/her card. company can be designated as a number of rides be- 
Aside from traveling, there are numerous examples 40 tween two predetermined locations for commuting The 
when cardholders are hindered by having to appear "units'* of a gasoline company are — again designated as 
personally to use their cards. They often would like to money units, and a unit of the car parking can be equiv- 
charge somebody else to do the transaction or to obtain alent to one day's parking. 

the service in question for him/her. However, card- All cards to date have in common that such units do 

holders are not permitted to hand over their cards and 45 not change their individual value from the time of card 

name their PIN to third parties. In most cases, they issuance or re-issuance until the moment when the last 

would not want to do this either. So card issuing organi- unit is "consumated". In other words one unit "initi- 

zations and cardholders find themselves on the same ated" as one U.S. Dollar or as a one way fare from 

side. If third persons were permitted to use the cards location A to location B, retain, for the time of their 

and, therefore, to learn the PIN of the original card- 50 "life", the value of one U.S. Dollar and of such one way 

holder, they could dispose of the whole value which is fare. 

assigned to the card. Presently known cards, thus, (a) are single-user cards 

In an attempt to overcome this inconvenience, card (unless they would originally be personalized by the 

issuing organizations sometimes offer additional cards issuer for more than one user, which, however, has 

for cardholders' families ("partner cards") or members 55 practically not yet been done) and (b) contain "units" 

of cardholders' business, often at lower cost. whose value is unalterable once loaded. 

The card issuing organization may thus assign one Summarizing, it can be stated that the relevant assign- 
card to more than one person and personalize such card ments, such as (a) the assignment of a card to a user 
with more than one PIN, each one for a different per- (cardholder), (b) the assignment of a designation to the 
son. This, however, would require an advance determi- 60 credit units, and (c) the assignment of a value to one 
nation of the use data (money, services, time frames or unit, are (A) controlled by the issuer(s) and (B) accom- 
other authorization) for each authorized person. Such plished prior to issuance or reissuance of the card, 
procedure would only meet the requirements of a small TArv/rrwrmw 
percentage of conceivable applications or cardholders. SUMMARY OF THE INVENTION 
It would also require quite some amount of red tape to 65 It is one object of the present invention, therefore, to 
be exchanged between the card issuing organization and provide a system wherein a card issued to a single card- 
such applicant cardholders to prepare and agree upon holder, or user, comprise means controllable by the 
the individual card (use) data for the personalization of cardholder at any time a issuance or reissuance, to as- 
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sign rights to third parties, to change and cancel such supplementary device comprising the keyboard, dis- 
rights and to assign additional designations and values play, logic and memory means, and a power source, 
to data stored in the card. The cardholder and the sub- The exterior of the card is then indistinguishable from 
user can . also change designations and values of data conventional cards. 

originally assigned to such data by the issuer(s), all 5 The supplementary device can be portable or station- 
within the scope of the original rights, terms and condi- ary. The contact between card and supplementary de- 
tions of the issuers). Expressed more generally, the vice can be galvanic or otherwise, such as optical, in- 
inventive system with cards or other modules, includes ductive, capacitive or by microwave. The supplemen- 
means for permanent after issuance or after reissuance tary device includes the means to assign the card to 
variability of data stored in memories within the card, 10 sub-users and to assign and alter values and. designa- 
by assigning codes, values and designations to said data tions. The supplementary device can be made in at least 
stored in said memories within the card. two embodiments, one for assigning the card to sub- 

In more detail, these means are controllable by the users, and another one to assign and alter values and 
cardholder to assign rights to a third person (sub-user) designations, or. it can be embodied as a combination 
at any time, at any place and to any selectable extent of 15 device for both tasks. This card is hereafter referred to 
use of the card, within the scope or rights, terms and as an "M-card", while the supplementary device is re- 
conditions the card has originally been initialized or ferred to as an "M-card envelope" or simply an "enve- 
reissued for by the issuer or the issuers, to the card- lope". 

holder. The card is assignable by the cardholder to a It has been found that a substantial need in the busi- 
predeterminable number of sub-users. The extent of 20 ness and banking community would be satisfied by the 
rights, terms and conditions for sub-use by an individual provision of a cardholder controllable multi-user card, 
sub-user, can refer: (a) to its application or issuer, such such as that of the present invention. This card would 
as for banking involving monetary application, or rail- serve to greatly enhance the comfort and convenience 
way riding involving a service; (b) to the term within of cardholders, card issuing organizations and card 
which the assignment shall be valid; and (c) to the 25 receiving businesses. Cardholders would be relieved of 
value, e.g. in money units, service units, number of uses performing each and every transaction themselves and 
or any other kind of digitally determinable credit or would be allowed to designate third persons as sub- 
authorization, and to other properties of the card. users to do one or more particular transaction or to 

These means further allow the cardholder or the , obtain certain services within the limitations of fixed 
issuer, after issuance or re-issuance of the card, to assign 30 terms and conditions set by the cardholder without 
different values to one unit, change the designations of disclosing his/her PIN and without opening thereby the 
units and assign additional designations to a unit, all card's full credit to such sub-users. For assignment to a 
within the scope of the original extent of terms, and sub-user a new PIN has to be entered for that sub-user, 
credit values initialized or reissued by the issuers). The M-card of the present invention can thus also serve 

The capabilities of the card, namely to be assignable 35 to enhance security against loss and theft. In cases when 
to sub-users and to be alterable as to the values and a cardholder is afraid that during the course of a trans- 
designations of the stored units, can be provided in action the PIN could be explored or spied out by a third 
individual (single) or in combinational (multi-user card- person, he could make the M-card useless for a thief or 
-(-variable value card) embodiments. a dishonest finder. The cardholder simply preprograms 

It is another object of the present invention to pro- 40 the M-card to make himself a sub-user, i.e., to assign 
vide a card with one or both of the aforesaid properties (besides his main PIN) a new PIN and limits the avail- 
which is compatible with existing systems. The input able value under the new PIN to the approximate or 
and output procedures of the multi-user card can be exact amount of the expected transaction and also sets a 
made to match the standards for cards that are within time window (term) within which such transaction shall 
the state of the art 45 be possible. He can do this shortly before a transaction 

The cardholder's operation to assign certain rights of is executed. Should he lose the card thereafter, the 
use to sub-users is selfcontained. That is, it does not preprogrammed credit has either been consummated or 
require any assistance from the system. The system can the time limit has expired. 

be designed, however, to provide assistance to the card- Another advantage is the alterability of values and 
holder to do the programming any time after issuance 50 designations. This makes the M-card flexible in a way 
or reissuance, at the cardholder's option, and in accor- which cannot be foreseen as to all possible aspects. The 
dance with his or her then prevailing requirements. following examples may serve to understand a few of 

It is still another object of the invention to provide the new applications, 
key means for entering data into the card, display means While it is conceivable that cards within the state of 
for checking the available conditions and balances of 55 the art could be initialized by the issuer for different 
consumable values, units and time and for specifying currencies, this is not very comfortable though, as most 
and checking the assignment or alteration data, and a people cannot foresee what their needs will be in a 
resident power source. The card further includes mem- year's time or so. It would enhance convenience and 
ory means and logic control means to process data comfort, if without re-initializing (reissuing) the card, 
when (a) the card is assigned to a sub-user, (b) values are 60 either a bank or the cardholder, or even a sub-user, 
altered or newly designated and (c) the card is used by could "change" any time, currencies within the M-card 
a sub-user with the original unit values and designations to the extent which is set by either the originally initial- 
or by the cardholder or a sub-user with altered unit ized terms and conditions and values or by the relevant 
values and designations. sub-user data. In another application, where a business 

It is still another object of the invention to provide 65 ("company") is the cardholder, the M-card can become 
such a card without keyboard, display and power a so-called company card. They may be in the form of 
source, but in combination with a supplementary device credit cards. Such company cards can be given by the 
("envelope") that can be connected to the card, the company to employees who travel at the company's 
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expense. The company can assign the M-card to an 
employee to make him/her a sub-user of the M-card and 
set the estimated amount of credit in one or more cur- 
rencies with a time limit. When using the M-card the 
employee enters the kind of expenditure into the card 5 
and then the M-card automatically keeps records of the 
transactions. When traveling abroad, he/she could even 
change valuta from one currency to another when he/- 
she needs money in another country. The procedure of 
changing valuta with floating rates of exchange will be 10 
described later. Upon return of the employee, he/she 
surrenders the M-card to the issuing company office. 
The issuing company office then inserts the M-card into 
a reader, where the transactions are read out from the 
transaction memory, the transactions representing the 15 
expense account of the traveling employee and are fed 
into the computer accounting system, where it is further 
processed. Thereafter, the transaction account in the 
memory of the M-card is reset to zero, the sub-user PIN 
(M-PIN) memory is cleared and the M-card can be 20 
programmed to be issued to another traveling em- 
ployee. 

It can easily be seen that the advantages of an applica- 
tion like this are manifold: the company saves liquidity. 
Since it need not furnish the traveling employee with 25 
cash money, (or its equivalent in travelers checks), and 
it saves card fees, since it need not obtain individual 
cards for all or most of its traveling employees. Further, 
the employee is relieved of having to sit down and write 
expense accounts. The bookkeeping of travel accounts 30 
is automated. The procedure even prevents "padding" 
or falsification of travel expense accounts or other ex* 
pense accounts, since the transaction memory of the 
M-card reflects the true value of each transaction, un- 
less a vendor cooperates fraudulently with the em- 35 
ployee. 

Another application becomes evident when an M- 
card is used by a traveling family. In such case, the 
cardholder can assign the M-card in different ways, e.g. 
to certain members of the family for the whole time of 40 
the trip and to others, only from one expected transac- 
tion to another or for a day or a number of days. The 
cardholder can program full authority for instance, for 
his or her spouse and limited amounts for the children. 
In addition, the M-card can serve as a foreign valuta 45 
means of payment, as described before. 

For changing valuta from one currency to another, 
which means altering the value of units and altering the 
designation of units, i.e., to "change" a certain amount 
of currency A to currency B, where there is a floating 50 
rate of exchange, a device or a machine serves to calcu- 
late and to authorize such "exchange" to make the M- 
card operable for transactions in the "new" currency. 
Such devices or machines will be installed by interna- 
tionally operating card issuing organizations at loca- 55 
tions where travelers mainly convene, e.g. airports, 
railway stations, hotels, etc. The machines operate on- 
line with a host computer, which updates the prevailing 
rates of exchange of floating currencies, permanently or 
from time to time. 60 

In still another application where a country provides 
visitors from abroad with special goods and services to 
be obtained at special places, e.g., hotels, M-cards pro- 
vide advantages over a system which either furnishes 
the visitor with special visitor vouchers (ViVo) in ex- 65 
change for his/her foreign valuta, or which country 
requires payment at those special places by foreign 
valuta. Neither alternative may suffice when it is illegal 



for domestic people to possess either visitor vouchers or 
foreign currency, especially when visitors pay for 
goods and services with ViVos or foreign currency at 
such places which also accept domestic currency. 

Now, in a system of the present invention which 
permits or requires the foreign visitor to exchange 
his/her foreign valuta against a "Visitor's Voucher 
Card", M-cards can be issued at the consulates of the 
country or at the place of entry into the country from 
M-card issuing machines into which the visitor's name, 
the PIN selected by him/her and the amount of money 
he/she wants to exchange is entered. Such machines 
can also comprise a banknote receiving module for 
valuta of a known type or a card acceptor for visitors' 
home credit or debit cards. The machine may even store 
the visa and health certificate of the visitor or visitors in 
their M-cards. When traveling inside the country, the 
visitor can assign the card to his/her co-traveling family 
members in accordance with their requirements. 

The great versatility of M-cards can be demonstrated 
by still another example within the aforesaid application 
of the M-card as a visitor's voucher card. Tlie visitor 
may wish to obtain goods or services which are pro- 
vided at certain places for domestic people and foreign 
visitors alike, such as clothes in department stores or 
airline or railway tickets. Since the visitor, when enter- 
ing the country and exchanging his/her money, cannot 
predetermine or foresee what will be the ratio of special 
goods and services reserved for foreign visitors to be 
paid by ViVos or the like, on the one hand, and other 
goods and services being obtainable by domestic cus- 
tomers and foreign visitors as well as to be paid by 
domestic money on the other hand, he/she— at the 
moment of transaction — enters into the M-card, the 
amount of money in domestic currency he/she is due to 
pay, which then is "exchanged" within the M-card into 
domestic currency. Thus, the domestic vendor receives 
domestic currency from domestic and foreign custom- 
ers likewise. In cases like this, there is no need for a 
device or machine to calculate and validate card cur- 
rency exchanged, as the government authorities use to 
set a fixed rate of exchange between visitor's vouchers 
(ViVo) and domestic currency, i.e., at least during the 
term of the M-card there is no floating rate of exchange. 

Further, at places such as hotels, airports and railway 
stations, where visitors accumulate, domestic currency 
cash dispensers can be placed which accept M-cards 
with an already pre-changed credit in domestic cur- 
rency to provide the visitor with domestic bank notes. 

While specific embodiments of the invention have 
been shown and described in detail to illustrate the 
application of the principals of the invention, it will be 
understood that the invention may be embodied other- 
wise without departing from such principals. 

BRIEF DESCRIPTION OF THE DRAWINGS 

In the accompanying drawings, forming a part of this 
specification, and in which reference numerals shown in 
the drawings designate like or corresponding parts 
throughout the same: 

FIG. 1 is a plan view of the M-card, used with the 
system of the invention, in its self-contained form; 

FIG. 2 is a block diagram of the components of the 
M-card shown in FIG. 1; 

FIG. 3 is a plan view of an M-card for use in combi- 
nation with an envelope; 

FIG. 4 is a perspective view of an envelope usable in 
combination with the M-card of the inventive system; 
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FIG. 4a is a perspective view of another embodiment The M-card may comprise all means as described 

of the envelope with M-card; above. In an alternative embodiment, the above means 

FIG. 5 is a view of the envelope with the M-card in are distributed between the card and an "envelope", 

a non-contact position; hereafter referred to as "M-card envelope". 

FIG. 6 is a view of the envelope with the M-card 5 In such an embodiment, the M-card comprises logic 
partly extracted and aligned in contacting position with and memory means, while M-card envelope may in- 

envelope contacts; elude other logic and memory means, display means, 

FIG. 7 is a view of the envelope with a cut-out to see keyboard means and an internal power source, 

contact positioning for the sub-user M-PIN and variable The M-card envelope in its portable form, in general, 

value operation; 10 has the form of a card, whereby its outer dimensions are 

FIG. 8 is a block diagram of the M-card and the a small percentage greater, so that it can receive the 

envelope, connected to each other, M-card through an opening at its shorter side. 

FIG. 9 is flowchart of the multi-user programming This embodiment of a combination consisting of M- 

for sUb-users; card and M-card envelope has the advantage that the 

FIG.10 is a flowchart of the cancellation process for 15 M-card looks like conventional cards and does not in- 

a sub-user authorization; elude display or keyboard means and the power source. 

FIG. 11 is a flowchart of the variable value program- Since the function of the M-card, when it also com- 

ming demonstrated with the example "FOREIGN EX- prises the display and the keyboard means and power 

CHANGE", including information on credit status; source, is analogue, i.e., almost equal to the function of 

FIG. 12 is a flowchart of variable value programming 20 a combination consisting of an M-card and an M-card 

shown in FIG. 11 without information on status; envelope, only the latter one will be described in more 

FIG 13 is a flowchart of the terminal validating pro- detail, 

cess related to FIGS. 11 and 12; The present M-card envelope would normally, al- 

FIG. 14 is a flowchart of the re-change process; though not necessarily, be owned by the holder of an 

FIG. IS a perspective view of the visitor voucher 25 M-card. However, the M-card and the M-card envelope 

card issuing machine, showing the operator control are not logically connected with each other. So, an 

pane l ; M-card holder could use any other "foreign" M-card 

FIG.ld is a view of the machine of FIG. IS, showing envelope to program his/her M-card. 

the visitor control panel The M-card, when used for transactions in an exter- 

FIG. 17 is a block diagram of the visitor voucher card 30 nal system, is utilized as any standard smart card or chip 

issuing machine; card, i.e., the utilization of the -card for transactions 

FIG. 18 is a flowchart of the visitor voucher card does not require the presence of the M-card envelope, 

issuing process; the process related to FIG. 17; For programming the M-card, the M-card is placed 

FIG. 19 is a perspective view of a visitor voucher inside the M-card envelope. The M-card envelope may 

card return machine; 35 serve as a container for the M-card, when it is. carried 

FIG. 20 is a block diagram of a visitor voucher card around by its holder. When the M-card envelope serves 

return machine; and as a container, the M-card is totally inserted into the 

FIG. 21 is a flowchart of the visitor voucher card M-card envelope, 

return process, related to FIGS. 19 and 20. To prepare the combination of M-card and M-card 

40 envelope for programming the M-card, the M-card and 

DESCRIPTION OF THE PREFERRED to envelope must be configured in a way that 

EMBODIMENTS a cooperative data exchange relationship is established. 

The objects of the present invention are accom- This can be done via galvanic contacts or otherwise, 
plished in general, by a device which may be portable such as inductance, light, microwave, etc. In the present 
or not, and operative in conjunction with other devices. 45 description, galvanic contacts are assumed. 
In case the device is portable, it is hereafter referred to Referring now to FIG. 1, an M-card 101 is shown in 
as our "M-card". In another embodiment, which may its selfcontained form. The keypad 102 includes the 
be portable or stationary as well, it is referred to as numerical keys "1" through "0" and "C" 110, which 
"incentive module" or "IncMod". While the M-card is serves to cancel the last entry, and further "reset" 109, 
compatible with cards in external systems which con- 50 "ok" 108, "info" 105, "service" 104 and the special keys 
form with generally accepted standards, the other em- in accordance with the present invention; "M" 106 and 
bodiment of the module, forms, in combination with "W" 107. The M-card 101 further includes the alpha- 
appertaining devices, a system of its own. Such other numerical display 103. 

devices would normally be in the form of a terminal or FIG. 2 is a block diagram, where the terminals 219 
an off-line stand alone unit, which will be referred to as 55 and 220 establish contact with an external device. The 
a "business station" or "BST". terrninals 219 are connected to an input/output device 
The M-card includes keyboard means for entering 218, which establishes a serial data exchange with an 
commands and identification data, and numerical values external device. The terminals 220 connect to a power: 
comprising, but not limited to, transaction data. The supply from an external source. A standard card logic 
devices further include memory means for permanently 60 208 serves mainly to authenticate the card, the PIN 
and temporarily storing data, and logic means for per- (checking the identity of the user and the rightful holder 
forming logic processes and arithmetic calculations on of the card) and for external transactions. An interim or 
data stored in the memory means and data entered via temporary memory 209 accepts external data for the 
the keyboard means. Display means are provided for time of the checking procedure, when such external 
selectively displaying data including, but not limited to 65 data, the PIN and other , identifying data, are fed into 
the commands and transactions to the card and to the this memory to be internally checked as to whether 
module in its portable embodiment The devices include they are correct or not A program memory 217 corn- 
also a power source, such as a battery. prises an into-program 16, a multi-service program 215, 
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an external transaction program 214, an arithmetic cal- 
culation program 213 and PIN check program 211. A 
cardholder's PIN memory 210 is not accessible from 
outside and its content is only available within the card. 
Interim memory 212 stores data for further internal 5 
processing. A multi-user (M) and variable value (W) 
logic 201 is logically adjacent to sub-user PIN program 
memory 206, variable value program memory 205, in- 
ternal transaction program memory 204 and display or 
text program in memory 230. A sub-user PIN memory 10 
207 is not accessible from outside and its content is also 
only available within the card. Sub-user PINs can be 
stored and erased under the control of M and W logic 
201. A working memory 224 comprises transaction 
accounts for the cardholder and sub-users 225, the terms 15 
of use for the cardholder and for sub-users 226, the W 
transaction account for cardholder and sub-users 227 
and the table of different services the card is commis- 
sioned for 228. The above working memory 224 is part 
of the standard function package of the card. A working 20 
memory 221 comprises a conversion (variation) factors 
table 222 and a designation menu 223. Memories 223 
and 222 can be arranged as a combinational register, 
where at least one designation is assigned, or correlated 
with one variation factor. 25 

It is noted that while the PIN is given as an example 
of cardholder and sub-user enabling code, any other 
code can be used, such as a voice print (to be stored as 
data and input by the cardholder or sub-user) or an 
algorithm such as a "trapdoor" algorithm mentioned 30 
above. 

Except for the terminals or connectors 219 and 220, 
the foregoing parts may all be integrated into one mono- 
lithic circuit The keyboard 102 comprises its numerical 
keypad 111, the function keys "service" 104, "info" 105, 35 
"reset" 109, "ok" 108 and the following keys, which are 
part of the present invention; the sub-user programming 
key "M" 106 and the variable value key "W" 107. The 
display 103 provides information concerning the user, 
and guides the cardholder when using the ("M*^ func- 40 
tion "sub-user programming", as well as to guide the 
cardholder and a sub-user when using the function 
"variable value". A power source 229 provides internal 
electric power for the logic circuits when in operation, 
and for programming and erasing EEPROM type of 45 
memories for sub-user PIN programming and variable 
value storage. Its function will be explained in more 
detail later in connection with, FIG. 8, whose function 
and operation are identical. 

Referring to FIG.3, an M-card 301 is shown which 50 
does not include a key-pad or a display. It indicates, 
however, a galvanic contacts block 302 with individual 
contacts 303. It further indicates bars 304, which differ 
in colour from the ground and serve for the proper 
alignment of the card, when brought in contact with the 55 
M-card envelope. 

FIG. 4a shows another embodiment of the invention 
where the envelope 501 has a slot 502 through which a 
programmable card 510 can be slid for programming a 
magnetic stripe 512 of the card. The envelope 501 may 60 
have a display, input keys and a power supply similar to 
the envelope of FIG. 4. In addition, envelope 501 in- 
cludes a, read/right head 504 for reading information 
from and writing information on the magnetic stripe 
512, as well as an erase head 506 for erasing the mag- 65 
netic stripe 512. In accordance with the present inven- 
tion, the magnetic stripe 512 carries the programmable 
memory of the card, whether the card is a multi-user 



card, a variable value card, or a card issued with visi- 
tor's vouchers. The card 510 can be programmed by 
manually sliding the card through the slot 502. 

FIGS. 4, 5, 6 and 7 show an M-card envelope having 
the keyboard 102, the display 103, a window 403 to 
make the alignment bars 304 visible when envelope and 
M-card are in the contacting position, and a recess 402 
to grip the card when totally inserted in the envelope. A 
cut-out area 701 in FIG. 7 shows the position of termi- 
nal block 302 when alignment bars 304 on the M-card 
301 are visible in the opening 403. This indicates that the 
terminal block 302 is in its contacting position with the 
counter contacts of the envelope. A snap or defective 
device can also be provided to hold the M-card in its 
proper contacting position. FIG. 8 is a block diagram of 
the M-card 301 when in contact with the envelope 401. 
Both are indicated by framing dotted lines. The parts of 
the card 301 are identical with the parts shown in FIG, 
2 with the only difference that keyboard 102, display 
103 and the power source 229 are now placed in the. 
envelope 401. The envelope further comprises the con- 
nectors 802 and 803, which establish contact with their 
counterparts 219 and 220 in the card. In addition, the 
envelope includes key-coding means 801, which serve 
for the serial input of key signals into the IO device 218. 

Since the function of the combination envelope, plus 
card, is, in principle, identical to the function of the self 
contained card as shown in FIG. 2, the function will be 
described only once in the following. 

FIGS. 2 and 8 are block diagrams of a combination 
card comprising the means for both the sub-user and the 
variable value function. It will be appreciated that these 
two functions can also be incorporated singly in sepa- 
rate cards. First, the sub-user function will be described. 
Before starting the operation, the cardholder inserts the 
card into the envelope and brings it, by properly align- 
ing the alignment bars 304 and in window 403, into its 
contacting position with the envelope. Then the card- 
holder presses the key "M" 106. The signal is coded in 
key-coding device 801 for serial transmission through 
the terminals 802 and 219 into the M/W logic 201, 
which is activated by this signal. 

Logic 201 then causes program memory 230 to re- 
lease the proper instruction texts on display 103 to guide 
the cardholder during the operation. The following 
texts on display 103 are each triggered by the foregoing 
operational step. All this is shown in the flowchart of 
FIG. 9. 

When activated by the signal from the "M" key 106, 
the logic 201 further causes the standard card logic 208 
to check the PIN of the cardholder in its standard way. 
If the PIN is correct, logic 208 releases a signal to logic 
201, which then requests, via the display, the card- 
holder to enter the PIN of the sub-holder (M-PIN)- To 
ensure that the entered PIN is the one the cardholder 
really wants, logic 201 activates once more, text pro- 
gram 230 to request the "ok" from the cardholder. The 
cardholder then presses the "ok" key 108, which signal 
coded in key coder 801 effects logic 201 to store the 
sub-user PIN in sub-user PIN storage 207 and make the 
PIN inaccessible from outside. Logic 201 triggers logic 
208 to open a sub-user transaction account 225 in work- 
ing memory 224 

The activation of a specific service, which is only 
relevant in a multi-company or multi-service card, can 
be used with the present invention. Details of this, how- 
ever, are not included here as not being a part of the 
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present invention. Appropriate steps, as shown in FIG. 
9, can provide for this capacity 

Sub-user program 206 then causes text program 230 
through display 103 to request from the cardholder, 
entry of the credit amount for sub-user's transaction 5 
account Upon having effected logic 208 to check in the 
conventional way, whether cardholder's transaction 
account provides sufficient funds to be transferred from 
cardholder's transaction account to sub-user's transac- 
tion account, the requested amount for sub-user's trans- 10 
action account is then, by internal transaction program 
204, through logic 201, internally transferred from card- 
holder's account to sub-user's transaction account 225 
in working memory 224. In the case where the card is a 
debit card to be used for accessing the cardholder's 15 
bank account, the card will not normally have a mem- 
ory for storing a cardholder transaction limit. The card, 
in accordance with the present invention, will, how- 
ever, have a sub-user memory for storing a maximum 
sub-user transaction amount to which the sub-user is 20 
authorized to conduct transactions using the debit card 

In case the sub-user's authority over his/her transac- 
tion account is to be limited by a certain term (time 
period), the entry of such term will then be requested 
from cardholder by the sub-user program analogously 25 
as in the amount function. Logic 201 will then cause 
logic 208 to enter such term into the "terms of use'* 
memory 226 in working memory 224 Sub-user's term is 
then assigned to sub-user's transaction account. For the . 
use of the M-card by a sub-user, for own transactions, 30 
the procedure is standard The only difference is that 
logic 208 has— when checking the PIN— not only ac- 
cess to cardholder's PIN memory 210, but also to sub- 
user's PIN memory 207. PIN check program 211, in 
program memory 217, is adapted accordingly. It first 35 
checks whether the PIN inputted by the user is avail- 
able in the cardholder's PIN storage, and in case it is 
not, it will then check with the sub-user PIN storage. If 
the inputted PIN cannot be found in either storage, the 
logic will start the wrong PIN procedure. If the input- 40 
ted PIN is found in the sub-user PIN storage, the stan- 
dard transaction or other program will be started by 
logic 208. 

FIG. 10 is a flowchart showing a process for the 
cancellation of sub-user authorization which is under 45 
the control of the cardholder. Sub-user program 206 in 
FIGS. 2 and 8, however, also causes logic 201 to auto- 
matically erase a sub-user PIN from sub-user PIN mem- 
ory 207, when the sub-user's positive balance in the 
transaction account 225 becomes zero or the sub-user's 50 
term in memory expires, whichever occurs first. 

The internal transaction program in memory 204 
causes logic 201 to re-transfer through logic 208 any 
possible positive balance from sub-user's transaction 
account to cardholder's transaction account, both in 55 
transaction memory 225. It further effects the transfer 
of the individual transactions of sub-user from sub- 
user's transaction account to cardholder's transaction 
account, affixing sub-user's PIN to such individual 
transactions for later auditing. The sub-user PIN pro- 60 
gram in memory 206 then causes logic 208 through 
logic 201 to cancel sub-user's term in memory 226. 

The sub-user uses and operates the card the same way 
as the cardholder does. The whole procedure within the 
system is, however, now related and limited to the pre- 65 
programmed credit and use data of the sub-user. 

The procedure is in principle as follows 

the machine checks the card authenticity; 



the card checks the sub-user's identity (upon sub- 
user's inputting his/her PIN); 
the card accepting machine checks available funds (to 
sub-user) and the term (sub-user's authorization 
terminating date); and; 
if ok for funds and term, the card accepting device 
executes the transaction and updates the sub-user's 
transaction memory within the card. 
This M-card subruser PIN procedure is thus like a 
"card-within-a-card". 

When the credit of the sub-user has been consumed, 
or the term has expired, the program within the card 
resets the sub-user transaction memory to zero and 
(re-)transfers any unused balance from the sub-user 
transaction memory to the cardholder's transaction 
(credit) memory. At the same time, the individual trans- 
actions of sub-user are transferred to the cardholder's 
transaction memory. To keep them identifiable for later 
auditing, the respective sub-user (M-)PIN is assigned, 
e.g., as a prefix to the amount(s) of the sub-user transac- 
tion^). 

Simultaneously, with the closing of the sub-user's 
transaction account (memory), the sub-user PIN will 
also be cancelled (automatic card function). 

Such terminating functions are executed either at the 
end of the last transaction, which consumates the whole 
credit or the rest of it; in case of expiration by time, 
when the card is used the next time with a card accept- 
ing device, which contains a calendar (real time clock), 
or receives the date from a host computer. 

Where the "envelope" comprises a calendar, the can- 
cellation will be effected when a card is inserted the 
next time after the expiration date, into the envelope. 

FIGS. 11 and 12 are flowcharts, which demonstrate 
variable value programming ("VV" key). FIG. 11 
shows the alternative, when the cardholder can inform 
him/herself via the info program in memory 216, on the 
available amount of credit for such operation. FIG. 12 
shows the flowchart without the "info" function. 

The variable value related section of the text program 
in memory 230 can be programmed in various ways. 
The function will be explained by the example "foreign 
exchange". A cardholder or sub-user disposes in his 
transaction account in memory 225, a certain credit 
balance in a given original currency. At a certain time, 
he/she wants to dispose of foreign exchange. Since both 
the cardholder and the sub-user can make use of this 
function, they will be referred to as "user" in the fol- 
lowing for the purpose of describing this particular 
function. 

To start the function, the user presses the "W" key 
107. The key signal effects the variable value program 
in memory 205 to request the user to prove his/her 
authorization by entering his/her PIN. So far, the pro- 
cedure is the same as with the sub-user function as ex- 
plained before. Once the entered PIN has been identi- 
fied as correct, the variable value program causes logic 
201 to call up the foreign exchange designation menu in 
memory 221. For this application, a selection of the 
designations of foreign currencies is preprogrammed in 
this memory. The user can now repeatedly press the 
"W" key 107, which causes logic 201 under the vari- 
able value program in memory 205 to display after each 
keystroke, the next designation of a foreign currency in 
a pre-arranged order. 

When the desired currency appears on the display, 
the user presses the "ok" key, whose signal then causes 
the variable value program to ask the user, via the dis- 
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play, for the amount The user then enters the amount 
onto numeric key-pad 111. Hereafter, as explained 
above, under the function "sub-user programming", the 
program checks whether the entered amount is avail- 
able as a credit balance in the cardholder's or sub-user's 5 
transaction account memory 225. If sufficient funds are 
available, the internal transaction program in memory 
204 transfers the selected amount from cardholder's or 
sub-user's transaction memory 225 to interim memory 
212. Then, the variable value program in memory 205 10 
effects the arithmetic calculation program in memory 
213 to convert the amount of original currency by cal- 
culating, with the proper conversion factor in memory 
222, the amount of selected foreign currency. 

The resulting amount of foreign currency is then 15 
transferred to W (variable value) transaction memory 
227. The variable value program in memory 205 effects 
through logic 201 the assigning of the designation of the 
foreign currency to this amount which is stored in VV ^ 
memory 227. 

The above function is related to the exchange of 
currencies which is based on fixed rates of exchange 
Such fixed rates of exchange are in the foregoing re- 
ferred to as conversion or variation factors. ^ 

When there is a floating rate of exchange between an 
original currency and a foreign currency, the procedure 
is split in one group of M-card functions, including 
selecting the designation of foreign currency to be ex- 
changed and transferring the desired amount from M- 3Q 
card transaction memory 225 to interim memory 212, 
and another of the external machine functions, compris- 
ing calculating the amount of foreign currency based on 
the then prevailing (floating) rate of exchange, and 
causing the variable value program in memory 205 35 
within the M-card to store the calculated amount of 
foreign currency in variable value transaction memory 
227, while cancelling the amount of original currency in 
interim memory 212 at the same time By machine pro- 
gram, the designation of the foreign currency and the 4$ 
rate of exchange used to calculate the amount of foreign 
currency, are assigned to the transferred amount of 
foreign currency now stored in variable value memory 
for the purpose of later re-exchange of foreign currency 
that was not used up into the original currency. That is, 45 
the designation is affixed to the amount stored in the 
variable value memory permits any transactions involv- 
ing the memory to be conducted according to the desig- 
nated currency. This further is a fair way of re- 
exchange, as neither the issuing organization nor the 50 
cardholder suffers a financial disadvantage in case the 
rate has changed between the time of exchange and the 
time of re-exchange, which is fundamentally different 
from the present procedure, where a person (or an orga- 
nization, such as a business company) has to accept the 55 
loss when the rate of exchange has floated in an un- 
favourable direction. 

FIGS. 11, 12 and 13 show flowcharts which elucidate 
the procedure when the exchange is determined by a 
floating rate of exchange. FIG. 14 is a flowchart which 60 
illustrates the procedure of re-exchange. 

FIGS. 15 and 16 are views of an issuing machine 1501 
for the M-card in its application of visitor vouchers 
(ViVo). In this embodiment, the issuing machine is 
designed in a way that the teller (bank or government 65 
operator) and the visitor are sitting in front of each 
other. FIG. 15 shows the operator's and FIG. 16 the 
visitor's control panels. 



In FIG. 15, the machine comprises an operator's 
display 1502, alpha-numerical keyboard 1504, a "start" 
button 1506, an "ok" button 1505, a PIN-pad 150/, a 
currency selector keyboard 1509, a customer slip 
printer 1503, a visitor's home credit/debit card slot 1510 
and a foreign banknote acceptor 1511. The visitor's 
home credit/debit card insertion slot could also be 
placed on the visitor's side. 1508 is a reset key. 

In FIG. 16, the machine further comprises a visitor's 
display 1602, a PIN-pad 1604, an "ok" button 1605 and 
an (M-)ViVo card stacker and dispenser 1606. 

FIG. 17 is block diagram of the (ViVo) card issuing 
machine. Besides the elements that are visible from the 
outside, the machine comprises a processing unit 1701, 
program memory 1702, interim PIN memory 1703 
(which is disposable where there is no stored PIN re- 
cord), a general visitor file 1704 and a machine journal 
and audit file 1705. 1706 is an exchange rate storage. 

Operations by both the operator and the visitor and 
the machine function are shown in the flowchart of 
FIG. 18. 

FIG. 19 is a perspective view of a (M-)ViVo card 
return machine 1801, which accepts at the place of the 
visitor's departure, the return ViVo card. The machine 
comprises visitor's display 1802 and, arranged in the 
visitor's control panel 1807, the "start" button 1806, the 
"ok" button 1805, the card return slot 1808, the PIN- 
pad 1804, the visitor's slip printer 1803 and the bank 
note dispenser 1809. 

FIG. 20 is a block diagram of the machine of FIG. 19, 
including a processing unit 1901, a program memory 
1902, an interim PIN memory 1903, the general visitor 
file 1904, and the machine's journal and audit file 1905. 

FIG. 21 shows a flowchart which explains the ViVo 
card return operation and card return machine function. 

The invention claimed is: 

1. A self-contained multi-user card combination, 
comprising: 

cardholder memory means for storing a cardholder 
personal identification code; 

programmable sub-user memory means for storing a 
sub-user personal identification code, and a sub- 
user use condition; 

program means for programming said programmable 
sub-user memory means with at least one selected 
sub-user personal identification code and for pro- 
gramming said programmable sub-user memory 
means with a selected sub-user use condition; 

authenticity checking means for authenticating a 
personal identification code as corresponding to 
the stored cardholder personal identification code 
for permitting access to said program means for 
programming said sub-user memory means, said 
authenticity checking means also authenticating a 
personal identification code as corresponding to a 
sub-user personal identification code stored in said 
sub-user memory means, said authenticity checking 
means upon authenticating a personal identification 
code as corresponding to die stored cardholder 
personal identification code, permitting a card- 
holder to conduct activities with the card combina- 
tion, said authenticity checking means upon au- 
thenticating a personal identification code as corre- 
sponding to a sub-user personal identification code 
stored in said sub-user memory means permitting 
access to said sub-user memory means for conduct- 
ing activities within the sub-user use conditions; 
and 
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input means for receiving at least one of a cardholder tion of said program means and to the cardholder and 

and sub-user personal identification code. sub-user. 

2. The combination of claim 1 wherein said authentic- 12. The combination of claim 11 including a multi- 
ity checking means automatically erases said sub-user user card carrying said cardholder and programmable 
personal identification code from said programmable 5 memory means, said program means, and said authen- 
sub-user memory means upon arriving at the sub-user ticity checking means, and a multi-user card envelope 
use condition. carrying said input means and said display means, said 

3. The combination of claim 1 wherein said card- multi-user card and said multi-user card envelope hav- 
holder memory means can store a cardholder transac- ing contacts which are connectable to each other at a 
tion value, said sub-user use condition comprising a 10 contact position of said card in said envelope for estab- 
sub-user transaction value limit, the combination includ- lishing communication between said display and input 
ing transaction means for conducting transactions to means, and said program and authenticity checking 
change at least one of the cardholder transaction value means. 

and sub-user transaction value limit, said authenticity 13 combination of claim 12 wherein said card 
checking means upon authenticating a personal en- 15 envelope is of the size to receive said card completely 

abling code as corresponding to one of a cardholder and therein, said contact position of said card being estab- 

sub-user personal enabling code, permitting access to with said card ^fog partly withdrawn from said 

said transaction means for conducting transactions. envelope 

4. The combination according to claim 3, wherein the 14 ^ combination of n including a portable 
cardholder transaction value is stored as a number of 20 card for m said mem ory means, as well as said 
units of one selected value designation, the combination m( m ^ authenticity checking and display 
including value computing means for changing the one means. 

selected value designation to a new value designation 15 ^ combination of claim n - mcl}ldillg a ^g^c 

and for storing a new number of umts of the new value ^ Qn ^ ^ for ^ colder and 

l^rcombination of claim ♦ wherein said value ^oStr^Snglald SITMISK 

including programmable variable value memory means readm 8 md wntm S data from t0 881(1 "»8netic 

for storing an equivalent number of units at the new 30 str jP e - . ... . . . . . 

value designation in response to said value computing 16 ' ™f combination of claim 1 wherein said pro- 
means, saidvalue computing means deducting said se- ^animable sub-user memory means stores a selected 
lected number of units of the selected value designations ^ wh L lch K programmable mto said sub-user memory 
from one of the stored cardholder transaction value or means said program means, as said use condi- 
stored sub-user transaction value limit, said authenticity 35 Uon md authenticity checking means authenticating 
checking means allowing access to said value comput- 831(1 sub-user enabling code only during said term, 
ing means upon the authentication of one of the per- 17 - ^ combination of claim 1 including a card car- 
sonal identification codes. a magnetic stripe, said magnetic stripe containing 

6. The combination of claim 4 including a menu mem- programmable sub-user memory means. 

ory for storing conversion rates for changing the se- 40 18 - ^ combination according to claim 1 including 

lected value designation, said value computing means 311 activation element connected to said authenticity 

being operable to select one conversion rate from said checking means and activatable before execution of an 

menu memory for changing the selected value designa- authenticity checking procedure in said authenticity 

tion. checking means for exclusively permitting access to 

7. The combination of claim 3 including a multi-user 45 sa * d program means for programming said sub-user 
card carrying said cardholder and programmable mem- memory means with a sub-user personal identification 
ory means, said program means and said authenticity code. 

checking means, and in combination, including issuing A multi-user card combination, comprising: 

means for receiving currency and having a currency cardholder memory means for storing a cardholder 

value memory for storing the exchange rates of a plural- 50 personal enabling code; 

ity of currencies as compared to a visitor's voucher programmable sub-user memory means for storing a 

issuable by said issuing means, and storing means for sub-user personal enabling code; 

storing in said cardholder memory means of the card program means for programming said programmable 

combination, a transaction value limit corresponding to sub-user memory means with at least one selected 

the number of visitors' vouchers corresponding to the 55 sub-user personal enabling code; 

value of currency received. authenticity checking means for authenticating a 

8. The combination of claim 7 wherein said issuing personal enabling code as corresponding to the 
means include value receiving means for receiving a stored cardholder personal enabling code for per- 
value in each of the plurality of currencies. mitting access to said program means for program- 

9. The combination of claim 7, wherein said issuing 60 ming said sub-user memory means, said authentic- 
means issues the card combination. ity checking means also authenticating a personal 

10. The combination of claim 9 wherein said issuing enabling code as corresponding to a sub-user per- 
means include code selection means for selecting a sonal enabling code stored in said sub-user memory 
unique cardholder personal identification code, said means; 

storing means storing said selected cardholder personal 65 said programmable sub-user memory means also stor- 

identification code in said cardholder memory means. ing a selected term which is programmable into 

11. The combination of claim 1 including display said sub-user memory means through said program 
means for displaying information to said in the opera- means, said authenticity checking means authenti- 
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eating said sub-user enabling code only during said 
term. 

20. The combination of claim 19 wherein said authen- 
ticity checking means automatically erases said sub-user 
personal enabling code from said programmable sub- 5 
user memory means upon the.expiration of said term. 

21. The combination of claim 19 wherein said card- 
holder memory means can store a cardholder transac- 
tion value limit, said sub-user use limit comprising a 
sub-user transaction value limit, the combination includ- 10 
ing transaction means for conducting transactions to 
change at least one of the cardholder and sub-user trans- 
action value limits, said authenticity checking means 
upon authenticating a personal enabling code as cone- 
spending to one of the cardholder and sub-user personal 
enabling code, permitting access to said transation 
means for conducting transections, said program means 
reducing said cardholder transaction value limit by the 
amount of said sub-user transaction value limit when 2Q 
said subuser transaction value limit is programmed into 
said programmable sub-user memory means, said au- 
thenticity checking means increasing said cardholder 
transaction value limit by any sub-user transaction value 
limit remaining in said sub-user memory means upon the 25 
expiration of said term, and reducing said sub-user 
transaction value limit to zero. 

22. A self-contained multi-user card for storing and 
processing data, the card having a microprocessor and 
memory means operatively associated with said micro- 
processor, the memory means having zones to which 
access by devices that are external to said card is pre- 
vented and in which reading and writing by means that 
are internal to the card are permitted, a first zone of the 
memory means storing a personal cardholder enabling 35 
code, the multi-user card comprising: 

at least one second zone in the memory means of the 
card which is internally programmable for storing 
at least one sub-user personal enabling code; 

internal program means in the microprocessor of the 40 
card for internally programming at least one sub- 
user personal enabling code into said second zone 
of the memory means; 

internal authenticity checking means in the micro- 
processor of the card for internally authenticating a 45 
personal enabling code as corresponding to the 
stored cardholder enabling code, for permitting 



access to said internal program means for internally 
programming said second zone; and 
said authenticity checking means also functioning for 
internally authenticating a personal enabling code 
as corresponding to a sub-user personal enabling 
code stored in said second zone. 

23. A multi-user card according to claim 22 including 
an activation element connected to said authenticity 
checking means and activatable before execution of an 
authenticity checking procedure in said authenticity 
checking means for exclusively permitting access to 
said second zone by said internal program means. 

24. A card combination, comprising: 

a card carrying a microprocessor having programma- 
ble memory means for containing data that is us- 
able for conducting a transaction using the card, 
and program means for changing data in the pro- 
grammable memory means, said card carrying 
communication means operatively connected to 
said program means for communication with the 
exterior of said card; and 

a card envelope for receiving said card, said card 
envelope carrying at least a power supply, display 
means, input means and communication means, 
operatively interconnected with said power sup- 
ply, said input means and said display means, and 
connectable with said communication means of 
said card in a selected relative position between 
said card and said envelope for inputting data 
through said input means and said connected com- 
munication means to said program means for stor- 
age in said programmable memory means, and for 
displaying data from said programmable memory 
means through said communication means to said 
display means; 

said envelope defining a space sufficiently large for 
completely enclosing said transaction card for stor- 
age and transport in a dormant state, said contact 
position between said transaction card and said 
card envelope comprising a position with said card 
partly removed from said envelope space. 

25. The combination according to claim 24 wherein 
said envelope includes a window, said card including a 
marker on an outer surface thereof, said contact posi- 
tion being established when said marker is visible in said 
window. 
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